>Personally, I think the whole Heimdal integration was more trouble than
>it's worth. Yes, it's integrated, but it doesn't even work with arguably
>the most widely used connectivity tool, which in a lot of ways makes it
>useless, and breaks compiling SSH w/ Krb5 support with any existing MIT
>Krb5 installation on the box.
I think that perhaps part of the reason people have been reluctant to
fully integrate ssh with Kerberos 5 is that there is no _standard_ for
doing so (there are a couple competeing ones).
FWIW, most Kerberos sites that I'm aware of use Kerberized telnet, and
the one shipped with NetBSD works just fine.
--Ken